bisecting fixing commit since 7f2c5eb458b8855655a19c44cd0043f7f83c595f
building syzkaller on 80a0690249dc4dbbbed95ba197192b99c73694c5
testing commit 7f2c5eb458b8855655a19c44cd0043f7f83c595f with gcc (GCC) 8.1.0
kernel signature: 05ed4a29dac5bf6920852748c8a840737f8df91cd2998728d8236b857c51e4b0
run #0: crashed: WARNING in cgroup_apply_control_disable
run #1: crashed: WARNING in cgroup_apply_control_disable
run #2: crashed: WARNING in cgroup_apply_control_disable
run #3: crashed: WARNING in cgroup_apply_control_disable
run #4: crashed: WARNING in cgroup_apply_control_disable
run #5: crashed: WARNING in cgroup_apply_control_disable
run #6: crashed: WARNING in cgroup_apply_control_disable
run #7: OK
run #8: OK
run #9: OK
testing current HEAD c196b3a9c83ae3491280b739d231d02b3cb9d041
testing commit c196b3a9c83ae3491280b739d231d02b3cb9d041 with gcc (GCC) 8.1.0
kernel signature: b7fe41f8a0196e236afdedebc47dd3ab8a7463b6914f27b08d50e75750b03a9b
run #0: crashed: WARNING in cgroup_apply_control_disable
run #1: crashed: WARNING in cgroup_apply_control_disable
run #2: crashed: WARNING in cgroup_apply_control_disable
run #3: crashed: WARNING in cgroup_apply_control_disable
run #4: crashed: WARNING in cgroup_apply_control_disable
run #5: OK
run #6: OK
run #7: OK
run #8: OK
run #9: OK
revisions tested: 2, total time: 38m5.189177912s (build: 18m32.88802052s, test: 18m49.230726742s)
the crash still happens on HEAD
commit msg: Linux 4.14.210
crash: WARNING in cgroup_apply_control_disable
IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
syz-executor.3 (5836) used greatest stack depth: 24616 bytes left
device veth1_macvtap entered promiscuous mode
IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready
------------[ cut here ]------------
WARNING: CPU: 1 PID: 7197 at kernel/cgroup/cgroup.c:2936 cgroup_ss_mask kernel/cgroup/cgroup.c:441 [inline]
WARNING: CPU: 1 PID: 7197 at kernel/cgroup/cgroup.c:2936 cgroup_apply_control_disable+0x31c/0x410 kernel/cgroup/cgroup.c:2939
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 7197 Comm: syz-executor.3 Not tainted 4.14.210-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0x14b/0x1f1 lib/dump_stack.c:58
 panic+0x1b0/0x358 kernel/panic.c:183
 __warn.cold.7+0x25/0x2c kernel/panic.c:547
 report_bug+0x1a4/0x1f3 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:964
RIP: 0010:cgroup_apply_control_disable+0x31c/0x410 kernel/cgroup/cgroup.c:2936
RSP: 0018:ffff8881d06af8a0 EFLAGS: 00010202
RAX: 1ffff1103b1b0f6b RBX: ffff8881d8d87b40 RCX: ffffed103af015e0
RDX: 1ffffffff0fe2bc1 RSI: 00000000ffffffff RDI: ffff8881d8d87b58
RBP: ffff8881d06af900 R08: 1ffff1103af015e0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87fdaf40
R13: ffff8881d75a7300 R14: ffffffff87fa32a0 R15: dffffc0000000000
 cgroup_finalize_control kernel/cgroup/cgroup.c:3003 [inline]
 rebind_subsystems+0x34e/0xa80 kernel/cgroup/cgroup.c:1631
 cgroup_setup_root+0x348/0x8f0 kernel/cgroup/cgroup.c:1900
 cgroup1_mount+0x49a/0xb8e kernel/cgroup/cgroup-v1.c:1245
 cgroup_mount+0x14b/0x850 kernel/cgroup/cgroup.c:2024
 mount_fs+0x7f/0x269 fs/super.c:1237
 vfs_kern_mount.part.9+0x58/0x3c0 fs/namespace.c:1046
 vfs_kern_mount fs/namespace.c:1036 [inline]
 do_new_mount fs/namespace.c:2549 [inline]
 do_mount+0x352/0x2af0 fs/namespace.c:2879
 SYSC_mount fs/namespace.c:3095 [inline]
 SyS_mount+0xb1/0xd0 fs/namespace.c:3072
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x46/0xbb
RIP: 0033:0x45f73a
RSP: 002b:00007fff193fa468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007fff193fa4c0 RCX: 000000000045f73a
RDX: 00000000004cbdbe RSI: 00000000004c18c5 RDI: 00000000004c1888
RBP: 0000000000000000 R08: 00000000004d0bd8 R09: 000000000000001c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000418770
R13: 00007fff193fa6e8 R14: 0000000000000000 R15: 0000000000000000
Kernel Offset: disabled
Rebooting in 86400 seconds..